{
  "x402Version": 2,
  "id": 15231,
  "slug": "15231",
  "resource": "https://buero.halowerk.com/v1/processing-record",
  "description": "Takes an inventory — the controller, and one entry per processing activity with its purposes, the stated legal basis, the categories of data subjects and of personal data, the categories of recipients, any third-country transfers, the erasure periods and the security measures — and returns it laid out as a draft record of processing activities under Article 30(1) GDPR.",
  "type": "http",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "4000",
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "activities": [
              {
                "data_categories": [
                  "Stammdaten",
                  "Vertragsdaten",
                  "Abrechnungsdaten"
                ],
                "data_subject_categories": [
                  "Beschaeftigte",
                  "Bewerberinnen und Bewerber"
                ],
                "legal_basis": [
                  "art6_1_b_contract",
                  "art6_1_c_legal_obligation"
                ],
                "name": "Personalverwaltung",
                "purposes": [
                  "Durchfuehrung des Arbeitsverhaeltnisses",
                  "Lohnabrechnung"
                ],
                "recipient_categories": [
                  "Lohnbuero",
                  "Finanzamt",
                  "Sozialversicherungstraeger"
                ],
                "retention_criteria": "Zehn Jahre nach Ende des Arbeitsverhaeltnisses wegen handels- und steuerrechtlicher Aufbewahrungspflichten.",
                "retention_period_days": 3650,
                "security_measures": [
                  "Rollenbasierte Zugriffsrechte",
                  "Verschluesselung im Ruhezustand",
                  "Protokollierung administrativer Zugriffe"
                ],
                "systems": [
                  "HR-Suite"
                ]
              },
              {
                "data_categories": [
                  "Kontaktdaten",
                  "Einwilligungsnachweis"
                ],
                "data_subject_categories": [
                  "Newsletter-Abonnenten"
                ],
                "legal_basis": [
                  "art6_1_a_consent"
                ],
                "name": "Newsletter",
                "purposes": [
                  "Versand des Kundennewsletters"
                ],
                "recipient_categories": [
                  "Versanddienstleister"
                ],
                "retention_criteria": "Bis zum Widerruf der Einwilligung, danach Loeschung binnen 30 Tagen.",
                "security_measures": [
                  "Double-Opt-in",
                  "Zugriff nur ueber Zwei-Faktor-Anmeldung"
                ],
                "systems": [
                  "Mailversand"
                ],
                "third_country_transfers": [
                  {
                    "country_code": "US",
                    "recipient_category": "Versanddienstleister",
                    "safeguard": "scc_art46_2_c",
                    "safeguard_reference": "Auftragsverarbeitungsvertrag 2026-014, Anlage 2"
                  }
                ]
              }
            ],
            "controller": {
              "address": "Hafenstrasse 4, 20359 Hamburg",
              "email": "datenschutz@nordlicht.example",
              "name": "Nordlicht GmbH"
            },
            "dpo": {
              "email": "dsb@nordlicht.example",
              "name": "Anna Berger"
            }
          },
          "bodyType": "json",
          "method": "POST",
          "type": "http"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "body": {
                "additionalProperties": false,
                "properties": {
                  "activities": {
                    "description": "One entry per processing activity. This is an inventory of activities, not a log of events.",
                    "items": {
                      "additionalProperties": false,
                      "properties": {
                        "data_categories": {
                          "description": "Article 30(1)(c), second half. Categories, e.g. \"contact data\", \"payroll data\" — never values.",
                          "items": {
                            "maxLength": 200,
                            "minLength": 1,
                            "type": "string"
                          },
                          "maxItems": 60,
                          "type": "array"
                        },
                        "data_subject_categories": {
                          "description": "Article 30(1)(c), first half. Categories, e.g. \"employees\", \"applicants\" — never individuals.",
                          "items": {
                            "maxLength": 200,
                            "minLength": 1,
                            "type": "string"
                          },
                          "maxItems": 30,
                          "type": "array"
                        },
                        "legal_basis": {
                          "description": "Which of Article 6(1)(a) to (f) you rely on. Your statement — it is recorded, not chosen or checked here.",
                          "items": {
                            "enum": [
                              "art6_1_a_consent",
                              "art6_1_b_contract",
                              "art6_1_c_legal_obligation",
                              "art6_1_d_vital_interests",
                              "art6_1_e_public_task",
                              "art6_1_f_legitimate_interests"
                            ],
                            "type": "string"
                          },
                          "maxItems": 6,
                          "type": "array"
                        },
                        "legitimate_interests_description": {
                          "description": "The interests relied on, where art6_1_f_legitimate_interests is named. Recorded as stated; no balancing test is performed here.",
                          "maxLength": 2000,
                          "type": "string"
                        },
                        "name": {
                          "description": "Short label of the activity, e.g. \"Payroll\" or \"Applicant management\".",
                          "maxLength": 200,
                          "minLength": 1,
                          "type": "string"
                        },
                        "processors": {
                          "description": "Processors under Article 28. Not required by Article 30(1); carried through unchanged.",
                          "items": {
                            "maxLength": 300,
                            "minLength": 1,
                            "type": "string"
                          },
                          "maxItems": 40,
                          "type": "array"
                        },
                        "purposes": {
                          "description": "Article 30(1)(b). One purpose per entry, in your own words.",
                          "items": {
                            "maxLength": 500,
                            "minLength": 1,
                            "type": "string"
                          },
                          "maxItems": 20,
                          "minItems": 1,
                          "type": "array"
                        },
                        "recipient_categories": {
                          "description": "Article 30(1)(d). Categories of recipients, e.g. \"payroll provider\", \"tax authority\".",
                          "items": {
                            "maxLength": 300,
                            "minLength": 1,
                            "type": "string"
                          },
                          "maxItems": 40,
                          "type": "array"
                        },
                        "retention_criteria": {
                          "description": "Article 30(1)(f). The criteria for erasure where no fixed period applies, e.g. \"six years after the end of the contract year\".",
                          "maxLength": 2000,
                          "type": "string"
                        },
                        "retention_period_days": {
                          "description": "Article 30(1)(f). Erasure period in days, where a fixed one applies. Unit is in the name: days.",
                          "maximum": 36525,
                          "minimum": 0,
                          "type": "integer"
                        },
                        "security_measures": {
                          "description": "Article 30(1)(g). General description of the technical and organisational measures under Article 32(1).",
                          "items": {
                            "maxLength": 500,
                            "minLength": 1,
                            "type": "string"
                          },
                          "maxItems": 40,
                          "type": "array"
                        },
                        "special_categories": {
                          "description": "Which special categories under Article 9(1) occur, if any.",
                          "items": {
                            "enum": [
                              "racial_or_ethnic_origin",
                              "political_opinions",
                              "religious_or_philosophical_beliefs",
                              "trade_union_membership",
                              "genetic_data",
                              "biometric_data",
                              "health_data",
                              "sex_life_or_orientation"
                            ],
                            "type": "string"
                          },
                          "maxItems": 12,
                          "type": "array"
                        },
                        "special_category_basis": {
                          "description": "Which of Article 9(2) you rely on, where special categories of data are processed.",
                          "items": {
                            "enum": [
                              "art9_2_a_explicit_consent",
                              "art9_2_b_employment_law",
                              "art9_2_c_vital_interests",
                              "art9_2_f_legal_claims",
                              "art9_2_g_substantial_public_interest",
                              "art9_2_h_health_care",
                              "art9_2_i_public_health",
                              "art9_2_j_archiving_research"
                            ],
                            "type": "string"
                          },
                          "maxItems": 8,
                          "type": "array"
                        },
                        "systems": {
                          "description": "The systems the activity runs in. Not required by Article 30; carried through because a record without systems is hard to maintain.",
                          "items": {
                            "maxLength": 200,
                            "minLength": 1,
                            "type": "string"
                          },
                          "maxItems": 40,
                          "type": "array"
                        },
                        "third_country_transfers": {
                          "description": "Article 30(1)(e). One entry per destination outside your own establishment. Destinations inside the EEA are recorded and marked as such.",
                          "items": {
                            "additionalProperties": false,
                            "properties": {
                              "country_code": {
                                "description": "ISO 3166-1 alpha-2, uppercase, e.g. US.",
                                "maxLength": 2,
                                "minLength": 2,
                                "type": "string"
                              },
                              "recipient_category": {
                                "description": "Category of recipient in that country.",
                                "maxLength": 300,
                                "type": "string"
                              },
                              "safeguard": {
                                "description": "The safeguard you rely on under Article 46 or 49. Recorded as stated.",
                                "enum": [
                                  "adequacy_decision_art45",
                                  "scc_art46_2_c",
                                  "bcr_art47",
                                  "codes_of_conduct_art46_2_e",
                                  "certification_art46_2_f",
                                  "derogation_art49",
                                  "none_stated"
                                ],
                                "type": "string"
                              },
                              "safeguard_reference": {
                                "description": "Where the safeguard is documented, e.g. a contract reference. Recorded, not retrieved.",
                                "maxLength": 500,
                                "type": "string"
                              }
                            },
                            "required": [
                              "country_code"
                            ],
                            "type": "object"
                          },
                          "maxItems": 30,
                          "type": "array"
                        }
                      },
                      "required": [
                        "name",
                        "purposes"
                      ],
                      "type": "object"
                    },
                    "maxItems": 100,
                    "minItems": 1,
                    "type": "array"
                  },
                  "controller": {
                    "additionalProperties": false,
                    "description": "The controller — Article 30(1)(a). Required.",
                    "properties": {
                      "address": {
                        "description": "Postal address as one line.",
                        "maxLength": 500,
                        "type": "string"
                      },
                      "email": {
                        "description": "Contact mailbox of the body. A functional address, not a person.",
                        "maxLength": 200,
                        "type": "string"
                      },
                      "name": {
                        "description": "Legal name of the body.",
                        "maxLength": 300,
                        "minLength": 1,
                        "type": "string"
                      },
                      "phone": {
                        "description": "Contact number of the body.",
                        "maxLength": 60,
                        "type": "string"
                      }
                    },
                    "required": [
                      "name"
                    ],
                    "type": "object"
                  },
                  "dpo": {
                    "additionalProperties": false,
                    "description": "The data protection officer, where one is appointed. Article 30(1)(a).",
                    "properties": {
                      "address": {
                        "description": "Postal address as one line.",
                        "maxLength": 500,
                        "type": "string"
                      },
                      "email": {
                        "description": "Contact mailbox of the body. A functional address, not a person.",
                        "maxLength": 200,
                        "type": "string"
                      },
                      "name": {
                        "description": "Legal name of the body.",
                        "maxLength": 300,
                        "minLength": 1,
                        "type": "string"
                      },
                      "phone": {
                        "description": "Contact number of the body.",
                        "maxLength": 60,
                        "type": "string"
                      }
                    },
                    "required": [
                      "name"
                    ],
                    "type": "object"
                  },
                  "joint_controllers": {
                    "description": "Joint controllers under Article 26, where there are any. Article 30(1)(a).",
                    "items": {
                      "additionalProperties": false,
                      "description": "One joint controller.",
                      "properties": {
                        "address": {
                          "description": "Postal address as one line.",
                          "maxLength": 500,
                          "type": "string"
                        },
                        "email": {
                          "description": "Contact mailbox of the body. A functional address, not a person.",
                          "maxLength": 200,
                          "type": "string"
                        },
                        "name": {
                          "description": "Legal name of the body.",
                          "maxLength": 300,
                          "minLength": 1,
                          "type": "string"
                        },
                        "phone": {
                          "description": "Contact number of the body.",
                          "maxLength": 60,
                          "type": "string"
                        }
                      },
                      "required": [
                        "name"
                      ],
                      "type": "object"
                    },
                    "maxItems": 20,
                    "type": "array"
                  },
                  "record_language": {
                    "default": "de",
                    "description": "Language of the article texts printed beside each letter. Your own wording is never translated.",
                    "enum": [
                      "de",
                      "en"
                    ],
                    "type": "string"
                  },
                  "representative": {
                    "additionalProperties": false,
                    "description": "The representative under Article 27, where one is appointed. Article 30(1)(a).",
                    "properties": {
                      "address": {
                        "description": "Postal address as one line.",
                        "maxLength": 500,
                        "type": "string"
                      },
                      "email": {
                        "description": "Contact mailbox of the body. A functional address, not a person.",
                        "maxLength": 200,
                        "type": "string"
                      },
                      "name": {
                        "description": "Legal name of the body.",
                        "maxLength": 300,
                        "minLength": 1,
                        "type": "string"
                      },
                      "phone": {
                        "description": "Contact number of the body.",
                        "maxLength": 60,
                        "type": "string"
                      }
                    },
                    "required": [
                      "name"
                    ],
                    "type": "object"
                  }
                },
                "required": [
                  "controller",
                  "activities"
                ],
                "type": "object"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              },
              "method": {
                "enum": [
                  "POST",
                  "PUT",
                  "PATCH"
                ],
                "type": "string"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "bazaar"
  ],
  "sourceHost": "buero.halowerk.com",
  "lastUpdated": "2026-08-20T06:44:22.698Z",
  "quality": {
    "calls30d": 1,
    "uniquePayers30d": 1,
    "lastCalledAt": "2026-08-20T06:44:22.351Z"
  },
  "liveness": {},
  "verified": false,
  "featured": false,
  "provider": {
    "host": "buero.halowerk.com",
    "manifest_name": "buero.halowerk.com",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-09-18T22:00:31.484Z"
  }
}